A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected is an unknown function of the file /insert-and-view/action.php. The manipulation of the argument content leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://code-projects.org/ | Product |
| https://github.com/shenxianyuguitian/hris-vuln-XSS/blob/main/README.md | Exploit Third Party Advisory |
| https://github.com/shenxianyuguitian/hris-vuln-XSS/blob/main/README.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.318600 | Permissions Required |
| https://vuldb.com/?id.318600 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.626792 | Exploit Third Party Advisory VDB Entry |
Configurations
History
05 Aug 2025, 14:40
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| CPE | cpe:2.3:a:fabianros:human_resource_integrated_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Fabianros
Fabianros human Resource Integrated System |
|
| References | () https://vuldb.com/?submit.626792 - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.318600 - Permissions Required | |
| References | () https://code-projects.org/ - Product | |
| References | () https://github.com/shenxianyuguitian/hris-vuln-XSS/blob/main/README.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.318600 - Third Party Advisory, VDB Entry |
04 Aug 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CWE | CWE-79 |
03 Aug 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-03 06:15
Updated : 2025-08-05 14:40
NVD link : CVE-2025-8501
Mitre link : CVE-2025-8501
JSON object : View
Products Affected
fabianros
- human_resource_integrated_system
CWE
No CWE.